diff --git a/.github/workflows/codeql_analysis.yml b/.github/workflows/codeql_analysis.yml index 871e5bee..12a1315d 100644 --- a/.github/workflows/codeql_analysis.yml +++ b/.github/workflows/codeql_analysis.yml @@ -14,12 +14,31 @@ jobs: steps: - name: Checkout repository uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + + - name: Set up JDK + uses: actions/setup-java@5ffc13f4174014e2d4d4572b3d74c3fa61aeb2c2 # v3.11.0 + with: + distribution: temurin + java-version: 18 + + - name: Setup Gradle caching + uses: gradle/gradle-build-action@749f47bda3e44aa060e82d7b3ef7e40d953bd629 # v2.4.2 + with: + gradle-home-cache-cleanup: true + cache-read-only: true + - name: Initialize CodeQL uses: github/codeql-action/init@7df0ce34898d659f95c0c4a09eaa8d4e32ee64db # v2.2.12 with: languages: java - - name: Autobuild - uses: github/codeql-action/autobuild@7df0ce34898d659f95c0c4a09eaa8d4e32ee64db # v2.2.12 + tools: latest + queries: +security-extended + + - name: Build project + shell: bash + run: | + ./gradlew assemble + - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@7df0ce34898d659f95c0c4a09eaa8d4e32ee64db # v2.2.12 with: